PT-2003-2469 · Pgpi+1 · Pgpdisk+1

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1524

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions PGPi PGPDisk version 6.0.2i

Description The issue allows local users to access data on another user's PGP partition when the switch user function in Windows XP is used, because PGPi PGPDisk 6.0.2i does not unmount a PGP partition.

Recommendations For PGPi PGPDisk version 6.0.2i, consider manually unmounting the PGP partition when switching users in Windows XP to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2003-1524

Produtos afetados

Pgpdisk

Windows Xp

Referências · 4

• http://securiteam.com/windowsntfocus/6M00L0K8KI.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13490 · Nota
• http://securityfocus.com/bid/8870 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1524 · Nota de Segurança